Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
File:                     C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer (raw, json)
Hash identifier:          ScuK5+NpvajLiHWRJI/XUf0jkv4iOMDUQZpzySnt3hg=
Subject key identifier:   C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25B3B758E7574C971E2A10F0FE1A8A5B87EC933E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Apr 2025 18:28:27 +0000
Certificate not after:    Wed 29 Apr 2026 18:33:27 +0000
Subordinate resources:    AS: 52580
                          IP: 45.178.216.0/22
                          IP: 179.191.160.0/19
                          IP: 186.195.64.0/20
                          IP: 2804:cf8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 03:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b3:b7:58:e7:57:4c:97:1e:2a:10:f0:fe:1a:8a:5b:87:ec:93:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 30 18:28:27 2025 GMT
            Not After : Apr 29 18:33:27 2026 GMT
        Subject: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:95:00:66:74:54:df:5d:d7:1f:d1:13:89:
                    3e:aa:9f:9c:f6:f6:28:91:6b:e1:5a:18:03:dc:15:
                    cf:3e:b9:d1:91:e0:2c:f4:1c:ec:a4:57:e6:62:d9:
                    31:57:ff:bb:6f:5f:e0:f0:b9:14:24:c0:26:2b:6f:
                    18:44:90:2e:f6:38:6a:7c:87:46:da:c9:c1:55:6d:
                    68:33:1e:73:78:06:4f:97:7a:82:ea:46:9c:47:22:
                    e0:28:1c:04:b1:d6:86:c5:0d:ca:40:0e:af:de:95:
                    1c:21:28:bb:f3:e7:00:d3:a7:5b:04:2c:37:fb:93:
                    df:42:e7:68:4f:33:58:f9:82:88:da:82:84:fa:56:
                    48:2f:6d:13:96:a9:8f:1d:9c:3c:89:5d:0f:e8:ac:
                    a4:e4:eb:94:ce:1a:94:73:d5:21:1c:88:4d:8b:b8:
                    e4:2f:ea:58:81:84:cb:b3:9f:ae:13:bf:57:07:59:
                    40:53:7b:fe:4b:b5:6c:21:5a:c7:d4:ba:01:a7:1a:
                    97:1f:b6:fe:45:f5:82:e9:43:43:1e:ba:1e:8c:cf:
                    40:5a:a9:b9:91:ce:1c:80:8e:b1:5b:13:cb:53:53:
                    03:30:c2:0a:13:ea:7c:fe:18:90:83:89:d1:14:49:
                    99:de:55:fc:6c:e7:97:ef:b2:61:19:39:e8:7a:bc:
                    30:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.216.0/22
                  179.191.160.0/19
                  186.195.64.0/20
                IPv6:
                  2804:cf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52580

    Signature Algorithm: sha256WithRSAEncryption
         7c:f5:ca:43:14:52:23:d7:e2:c5:ec:46:0d:95:4f:34:7d:f5:
         bd:b4:cd:e6:f8:7c:95:78:74:d4:20:d0:b6:7f:87:9a:47:13:
         e1:cb:5f:ff:c3:c3:d0:4e:63:9f:0d:7e:fb:86:40:5b:fb:08:
         27:cf:98:ae:e5:28:d9:b2:9e:97:15:3f:4d:11:be:5f:0a:99:
         17:04:be:43:ee:9c:22:48:ef:fa:40:50:ba:89:12:07:f7:7c:
         94:3d:0c:7c:d5:3e:ea:24:af:f3:96:e5:b7:82:fa:66:62:58:
         e9:5f:46:75:62:23:2f:9e:01:94:27:12:a7:7a:6b:a3:25:2d:
         c8:b0:94:cc:62:1d:04:f4:25:0d:a0:2a:6f:ca:ad:6e:c6:b4:
         18:de:12:ce:a7:54:df:d6:2e:e6:14:49:84:07:b5:50:0d:db:
         e8:c4:5b:73:be:68:e2:f7:56:62:42:24:7f:a1:77:eb:8e:3c:
         73:f4:f4:e9:09:0a:74:3c:c9:72:1e:16:3a:a0:4d:b4:3f:74:
         26:f4:db:87:ad:ea:5c:10:55:17:94:93:77:7e:cf:7b:b3:77:
         a6:35:92:75:97:4a:ad:f7:df:7b:2f:7f:09:5a:26:cb:c5:a2:
         ca:43:5f:35:99:5b:9e:7c:4f:24:29:20:cc:92:e5:57:d6:9f:
         94:35:3e:01
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUJbO3WOdXTJceKhDw/hqKW4fskz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MzAxODI4MjdaFw0yNjA0MjkxODMzMjdaMDMxMTAvBgNV
BAMTKEMxMzEzNkFERUVCQjU0MTExRTJDMDlGMkM3REZCQjM5NTFFQkNGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDA5UAZnRU313XH9ETiT6qn5z2
9iiRa+FaGAPcFc8+udGR4Cz0HOykV+Zi2TFX/7tvX+DwuRQkwCYrbxhEkC72OGp8
h0baycFVbWgzHnN4Bk+XeoLqRpxHIuAoHASx1obFDcpADq/elRwhKLvz5wDTp1sE
LDf7k99C52hPM1j5gojagoT6VkgvbROWqY8dnDyJXQ/orKTk65TOGpRz1SEciE2L
uOQv6liBhMuzn64Tv1cHWUBTe/5LtWwhWsfUugGnGpcftv5F9YLpQ0Meuh6Mz0Ba
qbmRzhyAjrFbE8tTUwMwwgoT6nz+GJCDidEUSZneVfxs55fvsmEZOeh6vDAhAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTBMTat7rtUER4s
CfLH37s5UevP0DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHBU
OGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0aTEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hw
VDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAvQzEz
MTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1MUVCQ0ZEMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCLbLYAwQFs7+gAwQEusNAMA0EAgACMAcDBQAoBAz4
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDNZDANBgkqhkiG9w0BAQsFAAOCAQEA
fPXKQxRSI9fixexGDZVPNH31vbTN5vh8lXh01CDQtn+HmkcT4ctf/8PD0E5jnw1+
+4ZAW/sIJ8+YruUo2bKelxU/TRG+XwqZFwS+Q+6cIkjv+kBQuokSB/d8lD0MfNU+
6iSv85blt4L6ZmJY6V9GdWIjL54BlCcSp3proyUtyLCUzGIdBPQlDaAqb8qtbsa0
GN4SzqdU39Yu5hRJhAe1UA3b6MRbc75o4vdWYkIkf6F36448c/T06QkKdDzJch4W
OqBNtD90JvTbh63qXBBVF5STd37Pe7N3pjWSdZdKrfffey9/CVomy8WiykNfNZlb
nnxPJCkgzJLlV9aflDU+AQ==
-----END CERTIFICATE-----
Generated at Thu May 1 02:48:17 2025 by rpki-client